Website Builders
Elementor
Provenance unknown Report an errorPanel rating · 6 judges · How to read the stars
Category median
Sovereignty: 1 of 6 dimensions proven
0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Elementor Ltd. · elementor.com
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Elementor at a glance
- Vendor
- Elementor Ltd.
- Headquarters
- Incorporated in Israel source, captured 3 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 3 Nov 2026
- Free plan
- Yes, per the vendor’s own page source, captured 3 Nov 2026
- Panel verdict
- The AI panel rates Elementor 3/5, the mean of 6 judges. Elementor is a drag-and-drop website builder for WordPress with hosting on Google Cloud behind a Cloudflare Enterprise CDN; persona-weighted totals ran 5.5-6.3. how scores are made
- As of
- Vendor pages captured 3 Nov 2026; evaluated by the panel 4 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Elementor is a drag-and-drop website builder for WordPress with hosting on Google Cloud behind a Cloudflare Enterprise CDN; persona-weighted totals ran 5.5-6.3. The strongest marks went to the editor — a documented design system of Classes, Variables, Components and Interactions plus AI that generates editable native pages — and to legal compliance: GDPR opt-in consent blocking non-essential scripts by default, CSV-exportable consent logs, and a published data processing agreement with EU standard contractual clauses. Weakest is SEO and marketing: "built-in SEO tools" is a bare phrase, and we found no public information on titles, sitemaps, redirects or analytics. Sovereignty sits at 4-5: EEA customers contract with Elementor EU Ltd. in Cyprus, the default entity is Elementor Ltd. in Israel, and the hosting region is not stated. Forms and business spans 4 to 6; the low mark rests on appointment booking we found no public information on and the terms' ban on uploading patient or medical information. Pricing transparency publishes prices to widget counts; we found no public information on the domain renewal price.
Speaks for it
- Design system of Classes, Variables, Components and Interactions, with AI generating full pages and forms as editable native content.
- GDPR opt-in consent blocks non-essential scripts by default, with consent logs exportable as CSV, GPC/DNT handling and Google Consent Mode v2.
- Published data processing agreement with EU standard contractual clauses and a sub-processor list in Schedule 3, with EEA customers contracting with Elementor EU Ltd. in Nicosia, Cyprus.
- Hosting on named infrastructure — Google Cloud behind a Cloudflare Enterprise CDN — with 99.9% uptime, 109ms time to first byte and per-plan backup days.
- Prices public down to widget counts: Essential at €5/Mo billed annually at €60/yr; One at €15/Mo billed annually at €180/yr, renewing at the regular rate €228/yr.
Held against it
- SEO and marketing scored 3-4, and we found no public information on page titles, descriptions, sitemaps, redirects or any analytics.
- Export covers sites and templates with Classes and Variables, while we found no public information on a self-service restore, mailboxes on your own domain, or a full content-and-media export.
- We found no public information on form field types, spam protection, notifications, or where form entries are stored.
- The default contracting entity is Elementor Ltd. in Israel under Israeli law; we found no public information naming a hosting region, sub-processor locations, or an ISO 27001 or SOC 2 certification.
- We found no public information on the domain renewal price after the free first year, cancellation notice periods or transaction fees, so a second-year total cannot be computed from the captured pages.
Best for
- You want a drag-and-drop editor with a real design system and AI page generation whose output stays editable native content.
- You run an online store and want cart, checkout, customer account dashboards, unlimited products and abandoned-cart email built in.
- You need GDPR opt-in consent with CSV-exportable logs, GPC handling and Google Consent Mode v2, plus a data processing agreement with EU standard contractual clauses you can file.
- You prioritise fast pages on named infrastructure: Google Cloud, Cloudflare Enterprise CDN, 99.9% uptime, 109ms time to first byte.
Avoid if
- You handle patient or medical information — the terms strictly forbid uploading it to the services.
- You are an organisation with more than fifty employees — ask the vendor: the public pages we read do not show it
- You rely on the free consent plan — consent logs there are automatically removed after 30 days.
- You require an EU-only contracting chain — the default entity is Elementor Ltd. in Israel, and aggregated and de-identified data may be used for purposes including AI model training.
The scores
| Criterion | Panel median |
|---|---|
| Editor, templates & design control | 4 of 5 |
| Hosting, domains & portability | 3.5 of 5 |
| SEO, analytics & visibility | 2 of 5 |
| Forms, bookings & business features | 3 of 5 |
| Imprint, privacy & cookie compliance | 3.5 of 5 |
| European sovereignty | 2.5 of 5 |
| Pricing transparency | 3 of 5 |
Editor, templates & design control
Show reasoningHide reasoning
How this is scored
How a site gets built and how far the owner can shape it: the editor (drag and drop, sections, AI drafts), the template range, responsive and mobile editing, fonts and brand styles, multilingual pages, custom code, and roles for collaborators or clients.
0 — Not a website editor; the product hosts files or code that are built elsewhere.
3 — An editor with a small set of templates and fixed layouts, where colours and texts change but structure, mobile view and languages are not described.
5 — A visual editor with a template gallery for several industries, layouts that adapt to mobile, brand colours and fonts, a blog, and the option to add pages in a second language or custom code snippets.
8 — Fine design control documented: free layout or section editing, separate mobile and breakpoint editing, reusable components or global styles, built-in multilingual sites with translated URLs, user roles for collaborators or clients, and site versions or history that can be restored.
10 — Design work at a professional level without leaving the tool: a design system with variables and components, interactions and animations, a CMS with custom collections, staging or branching before publishing, client handover with restricted editing, and the editor documented in depth.
The Small-Business Owner
The drag-and-drop editor is documented with a real design system of Classes, Variables and Components, Interactions, AI generation that produces editable native content, custom code and CSS on the higher tiers, and multilingual pages on paid plans with over sixty languages and RTL support. What held it back for me: we found no public information on separate mobile or breakpoint editing, on user roles for collaborators, or on restoring earlier versions of a site. 4 5 6 9 10
The Freelance Web Designer
The drag-and-drop editor is documented deeply for design work: atomic elements with Classes, Variables, Components and Interactions, a design system generated from brand info or a screenshot, AI producing full editable pages, and Theme Builder plus custom code and CSS on the paid tiers. I found no public information on separate mobile breakpoint editing, user roles for clients or a restorable version history, and the multilingual fact I found concerns the cookie banner product rather than site pages. 4 5 6 9
The Marketing Lead
The drag-and-drop editor is documented with a genuine design system — Classes, Variables, Components and Interactions — and AI that generates full pages and design systems from a prompt, brand info or screenshot, all as editable native content rather than a locked export. Multilingual management with automatic browser-language detection sits on the paid plans, over 60 languages ship with RTL support, and sites and templates export with their classes and variables. I found no public information on collaborator or client roles, version history with restore, or separate mobile breakpoint editing, which keeps this off the top rung. 4 5 6 9 10
The Practice Owner
The drag-and-drop editor is documented with a genuine design system — classes, variables, components and interactions — plus an AI builder that generates full editable pages, theme building, mega menus, and over sixty languages with multilingual management on paid plans. I found no public information on separate mobile or breakpoint editing, collaborator roles, or a version history I could restore, so I stopped short of the top. 4 5 6 9 10
The Data Protection Officer
The captured pages show a genuinely professional editor: a design system with Classes, Variables, Components and Interactions, AI that generates full pages and design systems as editable native content, and export and import of classes and variables with sites and templates. We found no public information on separate mobile editing, collaborator or client roles, or restorable version history, which is why I hold it one step short of the top level. 4 5 6
The Skeptic
Drag-and-drop building with a documented design system — Classes, Variables, Components, Interactions — plus AI that turns prompts into editable, structured pages, site and template export/import, and paid-plan multilingual support is genuinely professional-grade control. I stop short of the top because we found no public information on separate mobile or breakpoint editing, version history, collaborator roles or client handover. 4 5 6 9 10
Hosting, domains & portability
Show reasoningHide reasoning
How this is scored
What runs the site once it is built: included hosting, custom domains and domain registration, SSL, email mailboxes, speed (CDN, image optimisation), backups and restore, availability commitments — and whether pages, content and media can be exported when the owner moves on.
0 — No hosting; the product produces a design or files and the owner finds a host.
3 — Hosting on a subdomain with a custom domain on paid plans, but SSL, backups, storage limits and export are not described.
5 — Hosting included with a custom domain (or one included for a first year), free SSL, stated storage or bandwidth, a CDN or speed optimisation, automatic backups or a restore function, and an export of at least blog posts or content.
8 — Hosting described in depth: data-centre locations named, a stated uptime commitment, versioned backups with self-service restore, email mailboxes on the own domain, performance figures or Core Web Vitals addressed, and a documented export of pages, content and media.
10 — Hosting the owner can rely on and leave: an uptime SLA with credits, the hosting region selectable, DDoS and security measures named, a complete site export (code or standard formats) documented step by step, and domains transferable without fees or lock-in.
The Small-Business Owner
Hosting comes with real numbers: Google Cloud infrastructure behind a Cloudflare Enterprise CDN, 99.9% uptime, 109ms time to first byte, per-plan storage, bandwidth and backup days, named security measures, and a free domain for the first year that explicitly excludes renewals. Weaker for a one-man operation like mine: no email mailboxes on the own domain, the restore process not described, no named data-centre locations, and export only of templates and design tokens rather than whole-site content. 2 3 5 7 8
The Freelance Web Designer
Hosting is described in real depth: Google Cloud with Cloudflare Enterprise CDN, a 99.9% uptime figure, 109ms time to first byte, spelled-out storage, bandwidth, visits and backup retention per tier, free expert migration in, and a free first-year domain whose renewals are not covered. Websites and templates can be exported and imported with Classes and Variables since version 4.0, which matters when a client wants to move; a self-service restore, mailboxes on the own domain, a named data-centre region and domain transfer terms are not shown. 2 3 5 7 8
The Marketing Lead
Hosting is sold on named infrastructure — Google Cloud and a Cloudflare Enterprise CDN — with a 99.9% uptime figure, a 109ms time-to-first-byte claim, plan-level limits for visits, SSD storage, bandwidth and backup retention, DDoS, WAF and botnet defences, and a free expert migration in. A free first-year domain is documented with its terms, and SSL, backups and custom domains are named as included. Self-service restore, mailboxes on the own domain, data-centre locations and a full content-and-media export are not described; only templates with classes and variables are documented as exportable. 2 3 5 7 8
The Practice Owner
Hosting is real and described: Google Cloud infrastructure, Cloudflare Enterprise CDN, a 99.9 percent uptime figure, 109ms time to first byte, free SSL, a free first-year domain, and storage, bandwidth and backup windows listed per plan. I found no public information on a self-service restore or mailboxes on my own domain, and the only export I could see covers templates with classes and variables rather than my pages and media — the thing I need the day I move on. 2 3 5 7 8
The Data Protection Officer
Hosting is named rather than implied — WordPress hosting on Google Cloud behind Cloudflare's Enterprise CDN, with 99.9% uptime, a 109ms time-to-first-byte claim, per-plan storage and bandwidth, and 7 or 30 days of backups depending on plan. We found no public information on self-service restore, mailboxes on the own domain, or a documented export of full pages, content and media, and no data-centre region is named, so this does not reach the next level. 2 3 5 8
The Skeptic
Hosting comes with real numbers — 99.9% uptime, 109ms time to first byte, SSD storage, bandwidth and backup retention days, Cloudflare Enterprise CDN and a named security stack — and the builder itself is open source on GitHub, which softens lock-in. My problem is the exit: backups appear only as retention days, and we found no public information on a restore function, data-centre regions, or export beyond Elementor sites and templates, while the free first-year domain renews at an unpriced rate and its fee is deducted from refunds. 2 3 4 5 7 8
SEO, analytics & visibility
Show reasoningHide reasoning
How this is scored
How the site is found and measured: page titles and descriptions, clean URLs and redirects, sitemaps and indexing, structured data, local SEO, page speed for search, built-in or connectable analytics, newsletter or social sharing, and guidance for the owner who is not an SEO.
0 — No search settings at all; pages cannot be given titles or descriptions.
3 — Page titles and descriptions can be edited, but sitemaps, redirects, analytics and indexing control are not described.
5 — Editable titles, descriptions and URLs, an automatic sitemap, 301 redirects, social sharing previews, built-in visitor statistics or a documented connection to an analytics tool, and SEO guidance or a checklist inside the product.
8 — SEO documented in depth: structured data, canonical and noindex control, robots.txt editing, image alt texts and compression, local business listings or a Google Business connection, multilingual SEO with hreflang, and privacy-friendly analytics without third-party cookies.
10 — Visibility as a strength: full technical SEO control including server-side rendering and speed figures, AI search or answer-engine readiness addressed, search data shown inside the editor, marketing tools (newsletter, campaigns, A/B tests) built in, and every setting explained in the help centre.
The Small-Business Owner
Beyond a generic statement of built-in SEO tools with responsive design, the captured pages cover speed thoroughly — Core Web Vitals, time-to-first-byte improvements, lazy loading, local fonts and optimisation guides. But we found no public information on editable page titles and descriptions, sitemaps, redirects, visitor statistics, or anything that helps me show up when someone nearby searches for a carpenter. 7 9
The Freelance Web Designer
The pages point to built-in SEO tools without saying what they contain, while page speed is covered properly with caching and TTFB claims, image compression, lazy loading, local fonts and owner-facing performance guides. Email campaigns through the Send tool exist for stores, but I found no public information on sitemaps, redirects, editable titles and descriptions, structured data or any analytics. 3 7 9
The Marketing Lead
Beyond a single line that built-in SEO tools are included, the captured pages show no settings for page titles, descriptions, clean URLs, redirects, sitemaps or indexing, and no analytics at all — as someone measured on enquiries, that silence is the story. What is documented in depth is speed for search: image compression of up to 60%, lazy loading, DOM-size reduction, element caching claimed to improve time to first byte by up to 70%, and Core Web Vitals addressed in dedicated guides. 5 7 9
The Practice Owner
The pages claim built-in SEO tools and responsive design in a single line, and I found no public information on page titles and descriptions, sitemaps, redirects, indexing control or any analytics. What is documented is page speed for search — lazy loading, element caching, local fonts, DOM reduction and owner-facing performance guides. 7 9
The Data Protection Officer
The captured pages claim built-in SEO tools and responsive settings without describing page titles, descriptions, sitemaps, redirects or any analytics connection. The documented effort is speed — Core Web Vitals claims, DOM reduction, lazy loading, element caching and published optimisation guides — which serves ranking but is not search control, so I rate it at the basic level. 5 7 9
The Skeptic
Speed-for-search is documented in depth — Core Web Vitals, lazy loading, element caching, local fonts, an image optimiser and performance guides — and an email-campaign tool exists. But "built-in SEO tools" is a bare phrase on the captured pages: we found no public information on sitemaps, redirects, title and description control, indexing, or any analytics built in or connectable. 7 9 5
Forms, bookings & business features
Show reasoningHide reasoning
How this is scored
What the site does for the business beyond showing pages: contact and custom forms with spam protection and notifications, where form entries are stored, appointment bookings, member areas, events, integrations with CRM or calendar, payments and a small shop as an add-on — judged as features of a website, not as a shop system.
0 — No forms and no interactive features; the site shows pages only.
3 — A contact form that sends an email, with spam protection, storage of entries and further business features not described.
5 — Custom forms with several field types, spam protection and email notifications, entries stored or exportable, and at least one further business feature (bookings, member area, events or a small shop) described.
8 — Business features documented in depth: forms with conditional fields, file uploads and confirmation emails, appointment booking with calendar sync, member areas or gated pages, payments, integrations with named CRM, newsletter or automation tools, and an app or extension marketplace.
10 — The site runs a small business: forms, bookings, payments, invoices or memberships work together with consent and data retention settings per form, an API or webhooks for form data, and a documented integration ecosystem — while the shop stays one feature among several.
The Small-Business Owner
A form builder is included in every plan shown, the AI can generate complex forms, and the wider business suite is broad — a full WooCommerce shop with secure payment gateways, a customer account area, email campaigns, transactional email and a third-party addon ecosystem. The form itself is thin on paper though: we found no public information on spam protection, notifications landing in my inbox, storage of entries, or appointment bookings. 4 6 9
The Freelance Web Designer
A Form Builder is included across the shown plans, the AI can generate complex forms, and the business side goes well past a small shop: full WooCommerce building with unlimited products, checkout and cart design, customer account dashboards, payment gateways, named email and marketing tools, and a third-party addon ecosystem. What is not described is form spam protection, notifications, where entries are stored, bookings or member gating — the part I would need to see for my doctor and restaurant clients. 4 6 9
The Marketing Lead
A form builder is included in every paid plan shown and the AI assistant generates complex forms, but field types, spam protection, notifications and where entries land are not described anywhere I read — I cannot tell whether an enquiry reaches anything other than the site. The shop side is the deep end: a WooCommerce builder with unlimited products, customised cart, checkout and customer account area, payments through secure gateways, abandoned-cart and campaign emails, transactional email delivery, and an addon ecosystem with a developer API. I found no public information on bookings, member areas, or a connection to any named CRM. 4 6 9
The Practice Owner
A Form Builder is listed as included on the plans shown and the AI tools claim complex forms, but I found no public information on field types, spam protection, notifications, where entries are stored, or appointment booking with calendar sync — the one thing my practice needs most. The shop and marketing side is deep — unlimited products, checkout and cart design, a customer account dashboard, email campaigns, payments through secure gateways, and an addon ecosystem — and the terms forbid uploading patient or medical information to the services. 2 4 6 9
The Data Protection Officer
A Form Builder is named in the plan inclusions, but we found no public information on field types, spam protection, notifications, or where entries are stored and how long they are kept — the retention question I ask every year. The business side is otherwise well documented: a WooCommerce store builder with payments and inventory, a customer account dashboard, abandoned-cart and campaign email automation, transactional email and a third-party addon ecosystem. 4 9
The Skeptic
A form builder ships in every plan shown and the business layer is thick — secure payment gateways, digital and physical products with inventory, unlimited SKUs, cart and checkout design, account dashboards, abandoned-cart emails and AI store management. The forms are the thin part: we found no public information on field types, spam protection, notifications, where entries are stored, bookings or member areas. 9 6
Imprint, privacy & cookie compliance
Show reasoningHide reasoning
How this is scored
What the product does so that the owner's site is legal in Germany and the EU: an imprint page, privacy-policy and legal-text generators or partners, a cookie consent banner that blocks scripts until consent, GDPR-compliant forms, a data processing agreement for visitor data, fonts and media served without third-country transfers, and accessibility under the European Accessibility Act.
0 — Nothing for the site's legal obligations; the owner is left to add every legal page and banner from outside.
3 — Pages for an imprint and privacy policy can be added by hand, and a simple cookie notice exists, but consent blocking, a data processing agreement and form data handling are not described.
5 — A cookie consent banner, a data processing agreement offered to customers, documented GDPR handling of form entries, and help for imprint and privacy pages (templates, a generator, a named legal-text partner or a help article).
8 — Compliance worked out for EU sites: a consent banner that blocks scripts and embeds until consent and logs it, legal texts kept current by a named provider or a warranty against cease-and-desist letters, fonts and maps served without US transfer, and accessibility features or an accessibility statement.
10 — Compliance as part of the product: consent management with granular categories and records, legal texts maintained for several EU countries, every embed and script assessed for consent, accessibility to WCAG 2.1 AA documented with tooling, and the vendor's share of liability stated in its terms.
The Small-Business Owner
The cookie side is properly worked out — non-essential scripts blocked until consent under GDPR opt-in, site-wide scanning with categories, consent logs exportable as CSV, GPC/DNT and Google Consent Mode v2 honoured, an accessibility-minded banner, plus a published data processing agreement with EU Standard Contractual Clauses and the option to load fonts locally. But for my German paperwork we found no public information on help with imprint or privacy pages — the cookie policy generator is marked "coming soon" — and no cease-and-desist warranty or documented handling of form entries. 2 7 10 11
The Freelance Web Designer
Consent is handled seriously: the cookie mechanism blocks non-essential scripts by default under GDPR opt-in, scans and categorises cookies, logs consent with CSV export, supports Google Consent Mode v2 and GPC/DNT signals, and loads with no third-party scripts, while a published data processing addendum with EU standard contractual clauses under Cyprus law covers visitor data. Accessibility scanning with AI guidance also exists; I found no public information on imprint or privacy-policy help, and the cookie policy generator is only announced as coming soon. 2 9 10 11
The Marketing Lead
Consent is the strongest part: non-essential scripts blocked by default under GDPR opt-in, automatic cookie scanning and categorisation, consent logs with anonymised IDs, country, selected categories and timestamps exportable as CSV, Google Consent Mode v2, GPC and Do-Not-Track honouring, and the banner loads locally with no CDNs or third-party scripts. Fonts can be served locally, accessibility scanning with AI guidance is documented, and a data processing agreement is published as an integral part of the terms. I found no public information on imprint or privacy-page help — the cookie policy generator is only marked coming soon — and GDPR handling of form entries is not described; the vendor itself notes the consent tool cannot, by itself, guarantee full legal compliance. 2 7 9 10 11
The Practice Owner
The consent mechanism is the strongest evidence: an opt-in banner that blocks non-essential scripts by default, site-wide cookie scanning into four categories, consent logs with anonymized IDs exportable as CSV, GPC and Do-Not-Track handling, Google Consent Mode, accessibility scanning with AI guidance, and a data processing agreement with EU standard contractual clauses under Cyprus law for EEA customers. I found no public information on help with imprint or privacy pages or on GDPR-compliant form handling, the cookie policy generator is marked coming soon, and the vendor itself notes the tool cannot alone guarantee full legal compliance. 2 9 10 11
The Data Protection Officer
The consent mechanism is what I want on every client site: non-essential scripts blocked by default under GDPR opt-in, cookies scanned and sorted into four categories with a drag-and-drop manager, consent logged with country, status, selected categories and timestamp, exportable as CSV, expiry configurable to 365 days, GPC honoured as a denial and Google Consent Mode v2 supported. Local font loading is documented and the DPA, with EU Standard Contractual Clauses and a sub-processor list in Schedule 3, can be filed; a cookie policy generator and IAB TCF support are only coming soon, and we found no public information on legal-text maintenance for EU countries or a WCAG 2.1 AA accessibility statement. 2 7 10 11
The Skeptic
The consent mechanism is the real thing — non-essential scripts blocked by default under GDPR opt-in, site-wide scanning into four categories, consent logs with fields and CSV export, GPC/DNT handling, Google Consent Mode, a banner that loads with no CDN or third-party script, and a published data processing agreement with EU standard clauses covering end-user data. It falls short for German needs: the cookie-policy generator is marked coming soon, we found no public information on imprint help, a legal-text partner or a WCAG statement, and free-plan consent logs are automatically removed after 30 days — records that do not outlive the retention period. 10 11 2 9
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where the sites, the form entries and the visitor data are hosted, and who the subprocessors are (hosting, CDN, email delivery, analytics, payments, AI features). Independently sourced by the sovereignty pipeline; the data subjects here are the owner's own visitors and customers, so the whole chain counts, not only the editor.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available or an EU contracting entity, a data processing agreement offered, but parts of the chain (CDN, email, analytics, AI features, support) run through non-EU providers or the subprocessors are listed without locations.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, data export and deletion documented, and certifications published with their scope rather than implied.
The Small-Business Owner
The terms name Elementor EU Ltd. in Nicosia, Cyprus as the contracting party for EEA customers, with Cypriot law for the data protection addendum, EU Standard Contractual Clauses, and a subprocessor list held in a schedule. Against that, the default contracting entity is Elementor Ltd. in Israel under Israeli law, the hosting region is not stated beyond Google Cloud, AI features run through unnamed third-party providers, and we found no ISO 27001 or SOC 2 certification — only a bug bounty and a Trust Center. 2 3 4 11
The Freelance Web Designer
The terms name an EEA contracting entity, Elementor EU Ltd. in Nicosia, with Cyprus governing law for EEA customers, and a published data processing addendum offers the EU standard contractual clauses plus a sub-processor list in a schedule. The hosting pages name Google Cloud and Cloudflare without a region, no data residency is confirmed, sub-processor locations are not shown, and no ISO 27001 or SOC 2 certification is stated anywhere in the captured pages. 2 3 11
The Marketing Lead
EEA customers contract with Elementor EU Ltd. in Cyprus under Cyprus law, and the published data processing agreement offers EU standard contractual clauses, a sub-processor list made available in a schedule, and deletion or return of personal data on termination. But the default contracting entity is Israeli, the hosting runs on Google Cloud behind a Cloudflare Enterprise CDN, AI features pass to third-party providers, and the sub-processor list carries no locations in the captured text. I found no public information on data-centre regions or security certifications such as ISO 27001. 2 3 11
The Practice Owner
EEA customers contract with Elementor EU Ltd. in Nicosia under a published data processing agreement incorporating the EU standard contractual clauses with Cyprus as governing law, and a sub-processor list is attached to that agreement. Hosting is described as Google Cloud with Cloudflare's enterprise CDN, but I found no public information naming the hosting region or the sub-processor locations, and the default contracting entity is Elementor Ltd. in Israel under Israeli law. For a practice that must keep patient data in Europe, I would want those locations confirmed in writing before signing. 2 3 11
The Data Protection Officer
EEA customers contract with Elementor EU Ltd. in Nicosia, Cyprus, and a published DPA with EU Standard Contractual Clauses and a Schedule 3 sub-processor list exists; the default entity, however, is Elementor Ltd. in Ramat Gan, Israel, under Israeli law. Hosting runs on Google Cloud with Cloudflare's Enterprise CDN, but no data-centre region is stated and the sub-processor excerpt names no locations, so the chain is only partly fileable. 2 3 11
The Skeptic
EEA customers contract with Elementor EU Ltd. in Cyprus under a published data processing agreement with EU standard contractual clauses and a sub-processor schedule, which clears the middle bar. But the default entity is Elementor Ltd. in Israel with Israeli law for everyone else, hosting is described as Google Cloud with no region named, Cloudflare and unnamed third-party AI providers sit in the chain, aggregated user data feeds AI model training, and we found no security certifications stated on the vendor's pages. 2 3 11
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real cost over two or three years from public pages alone: the monthly price per plan, the introductory price and how long it lasts, the renewal price after it, setup fees, minimum term and notice, domain and mailbox renewals, transaction fees on sales, and which features (ad removal, extra languages, bookings, more storage) cost extra.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free plan is shown, but what the plans include, what they cost after the first term or how the cost scales is unclear.
5 — Plans are public with prices and their main inclusions, but at least one commonly needed piece (the price after an introductory offer, domain renewal, a mailbox, transaction fees, an add-on) is unpriced or hard to find.
8 — Every plan priced publicly with the introductory price, its duration and the regular price after it, setup fee, minimum term and notice period, domain and add-on prices listed, and VAT treatment stated.
10 — Complete price computability: the cost of a given site over several years derivable from public pages, with every add-on, renewal, transaction and support fee, the cancellation terms and what happens to the site and domain after cancellation published.
The Small-Business Owner
Plans are public with prices and detailed inclusions — Essential at "€5/Mo Billed annually at €60/yr", Advanced Solo at "€7/Mo Billed annually at €84/yr", Advanced at "€9/Mo Billed annually at €108/yr" — and the One plan even states "Billed annually at €180/yr" and "Renews at regular rate €228/yr", with taxes stated as excluded and added at checkout. But the renewal price of the cheaper plans, the cancellation notice period, the domain cost after the free first year, and mailbox or transaction fees are not described, so I cannot compute my second-year total. 2 3 8 9
The Freelance Web Designer
Plans are public with monthly and annual figures and inclusions down to which widgets each tier includes, the One plan states it renews at €228/yr after the €180/yr introductory year, VAT treatment is stated, and the first-year free domain and refund rules are spelled out. Still missing for a two-year cost calculation: the domain renewal price, mailbox or transaction fees, setup fee, minimum term and notice period. 2 3 8 9
The Marketing Lead
Plan prices are public down to widget counts — Essential at €5/Mo billed annually at €60/yr for one site, Advanced Solo at €7/Mo at €84/yr, Advanced at €9/Mo at €108/yr for three sites — and the One plan even shows the renewal: €15/Mo billed annually at €180/yr, renews at €228/yr. VAT treatment, the 30-day money-back guarantee (annual plans only, one refund per product per twelve months, domain fees deducted), the first-year-only free domain and 30 days' notice for fee changes are all stated. Still missing for a two-year computation: the cancellation notice period, domain renewal prices, mailbox costs and any transaction fees — and the terms require firms with more than fifty employees to take a business or enterprise licence for which no price is published. 2 3 8 9 10
The Practice Owner
Prices are public with their inclusions: Essential at €5/Mo billed annually at €60/yr, Advanced Solo at €7/Mo at €84/yr, One at €15/Mo billed €180/yr renewing at the regular rate €228/yr, taxes added at checkout and exclusive of the listed fees, auto-renewal with thirty days' notice for fee changes, and a 30-day money-back guarantee on annual plans with domain fees deducted on refund. To compute a two-year cost I would still need the domain renewal price, a cancellation notice period, and clarity on whether the smaller plans' prices are introductory. 2 3 8 9
The Data Protection Officer
Plan prices, annual totals and per-plan inclusions are public — down to which widgets and features are marked not included — and the One plan states its introductory €15/Mo and its regular renewal rate of €228/yr, with VAT stated as excluded and added at checkout. We found no public information on domain renewal pricing after the free first year, transaction fees, add-on prices, or minimum term and notice period, so a two- or three-year total is not computable from these pages alone. 2 3 8 9
The Skeptic
Prices are public down to widget counts: Essential at €5/Mo billed annually at €60/yr, Advanced at €9/Mo billed annually at €108/yr, One at €15/Mo with its renewal rate of €228/yr published, taxes stated as added at checkout, and auto-renewal plus refund limits spelled out in the terms. What I cannot compute from these pages: the domain renewal price after the free first year, notice or cancellation terms, transaction fees on sales, and whether the smaller plans renew at the rate they start with. 9 2 8 3
European sovereignty — proven facts
1 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Incorporated in IL ⚠ unverified | 0/2 pts | 2 Report an error |
|---|---|---|---|
| Hosting location | Not determined | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined ⚠ unverified | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Elementor
Is Elementor European?
Not determined: the vendor’s pages as captured do not say where Elementor is based. Its vendor, Elementor Ltd., is incorporated in Israel, per the vendor’s page captured 3 Nov 2026.
Where does Elementor store data?
Not stated on the vendor’s pages as of 3 Nov 2026.
Does Elementor have a free plan?
Yes. Elementor has a free plan, per the vendor’s page captured 3 Nov 2026.
What are the best alternatives to Elementor?
As of 4 Nov 2026, the panel rates Duda (3.5/5), Wix (3.5/5) and WordPress.com (3.5/5) highest among the other 17 Website Builders products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Framer (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Elementor alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 3 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement, Open source, Hosting options. Not confirmed on the vendor’s own pages as captured.
- Weak sourcing — Legal entity. The contracting entity may instead be a different Elementor subsidiary depending on the customer's billing region, and no registered address or commercial register is given in the excerpts.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 59 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 14 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 6 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 4 hosting facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
Sources (11)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor page elementor.com Checked 3 Nov 2026 Details →
- 2 Terms of service — found from the homepage elementor.com Checked 3 Nov 2026 Details →
- 3 Security / trust page — found from the homepage elementor.com Checked 3 Nov 2026 Details →
- 4 Code repository (open-source licence) — found from the homepage github.com Checked 3 Nov 2026 Details →
- 5 Editor, templates & design control — found from sitemap elementor.com Checked 3 Nov 2026 Details →
- 6 Editor, templates & design control — found from sitemap elementor.com Checked 3 Nov 2026 Details →
- 7 Hosting, domains & portability — found from sitemap elementor.com Checked 3 Nov 2026 Details →
- 8 Hosting, domains & portability — found from sitemap elementor.com Checked 3 Nov 2026 Details →
- 9 Forms, bookings & business features — found from sitemap elementor.com Checked 3 Nov 2026 Details →
- 10 Imprint, privacy & cookie compliance — found from sitemap elementor.com Checked 3 Nov 2026 Details →
- 11 Imprint, privacy & cookie compliance — found from sitemap elementor.com Checked 3 Nov 2026 Details →